ThreatMapper
ThreatMapper copied to clipboard
[v2] Deleting vulnerability result makes Top vulnerabilities and Top Attack paths disappear, and information in results is removed
Describe the bug Once vulnerability result is deleted, 'Top 5 vulnerabilities' list disappears and 'Top Attack Paths' graph has overlapping text of 'No attack paths found'. Also, results lose information like CVSS score, Description, etc.
To Reproduce Steps to reproduce the behavior:
- Go to 'Vulnerabilities' section
- Click on 'See All Scans'
- Click on any of the host/container/image to show its latest complete scan details
- Delete any result from the list. 'Top 5 vulnerabilities' list disappears and 'Top Attack Paths' graph has overlapping text of 'No attack paths found'. Also, other results lose information
Expected behavior On vulnerability result deletion, other results should not be impacted.
Screenshots
Before deletion:
After deletion:
Components/Services affected
- [x] UI/Frontend
- [x] API/Backend
- [ ] Agent
- [ ] Deployment/YAMLs
- [ ] CI/CD Integration
- [ ] Other (specify)
Additional context Add any other context about the problem here.
Notice all cvss score becomes 0. That's why top vulnerabilities doesn't load.
Attack path needs to be fixed though
Removing this part of code on server fixes the issue https://github.com/deepfence/ThreatMapper/blob/v2/deepfence_server/reporters/scan/scan_result_actions.go#L138-L153
fixed in https://github.com/deepfence/ThreatMapper/commit/8ff0d11237cec51e2146b39a8ea81e1f505e45cc